Do not open a public issue for a suspected vulnerability. Email security@prosodyai.app with a clear description, affected versions, and steps to reproduce the issue.

Do not include live API keys, customer audio, transcripts, or speaker identity data. We will acknowledge the report and coordinate remediation and disclosure privately.

Until versioned npm releases begin, security fixes target the latest commit on the main branch.